5632 matches found
CVE-2005-2586: Undefined Security Weakness
Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information...
Multiple Mentor ADSL router vulnerabilities
Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...
kshoutaxs.txt
=========================================================== ============================================================ Title: Kshout Data Disclosure Vulnerability Discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 26/07/2005 Severity: Medium. Remote users can view...
Kshout Data Disclosure
=========================================================== ============================================================ Title: Kshout Data Disclosure Vulnerability Discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 26/07/2005 Severity: Medium. Remote users can view...
osCommerce update.php readme_file Parameter Arbitrary File Disclosure
The osCommerce installation on the remote host has a supplementary script, 'extras/update.php', that fails to validate user-supplied input to the 'readmefile' parameter before using that to display a file. An attacker can exploit this flaw to read arbitrary files on the remote host, such as the...
PT-2005-3138 · Capturix · Capturix Scanshare
Name of the Vulnerable Software and Affected Versions: Capturix ScanShare version 1.06 build 50 Description: The issue concerns the storage of sensitive information, such as passwords, in cleartext within the capturixss cfg.ini file. This file is readable by local users, potentially exposing the...
DSA-735-2 sudo - pathname validation race
Bulletin has no description...
Debian DSA-735-1 : sudo - pathname validation race
A local user who has been granted permission to run commands via sudo could run arbitrary commands as a privileged user due to a flaw in sudo's pathname validation. This bug only affects configurations which have restricted user configurations prior to an ALL directive in the configuration file. ...
DSA-735-1 sudo - pathname validation race
Bulletin has no description...
CVE-2002-1810
CVE-2002-1810 - Affected product: D-Link DWL-900AP+ Access Point, versions 2.1 through 2.2. Vulnerability: Remote attackers can access the TFTP server without authentication and read the config.img file. Impact: config.img contains sensitive information such as the administrative password, WEP en...
CVE-2002-1840: Undefined Security Weakness
irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system...
JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure
source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplied request data. Information that attackers can harvest throu...
CVE-2005-1828: Cleartext Storage of Sensitive Information
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...
CVE-2005-1828
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...
CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...
CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...
CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...
CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...